Expoint - all jobs in one place

The point where experts and best companies meet

Limitless High-tech career opportunities - Expoint

EY TC-CS-Data Protection Privacy-Senior 
India, Karnataka, Bengaluru 
217679511

01.12.2024

As part of our EY Cyber security, Technology Consulting team, your role will be to actively establish, maintain and strengthen internal and external relationships. You will be responsible for delivery and maintaining quality of services and deliverables on your engagements. You’ll also identify potential business opportunities for EY and GDS within existing engagements and escalate these as appropriate. Similarly, you’ll anticipate and identify risks within engagements and share any issues with senior members of the team.

Your key responsibilities

  • Lead the execution of comprehensive Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for clients, identifying potential data privacy risks and providing their remediation plans.
  • Develop and implement robust consent management frameworks to ensure clients' adherence to data subject consent requirements as per applicable regulations.
  • Conduct in-depth data privacy gap assessments and maturity assessments to identify areas for improvement and guide clients in developing a strategic roadmap for program enhancement.
  • Provide strategic guidance on data subject rights, including access requests, rectification requests, and erasure requests.
  • Craft and implement effective incident response plans to manage data breaches and privacy incidents, minimizing risk and upholding regulatory compliance.
  • Develop and maintain Records of Processing Activities (RoPAs) for clients, ensuring transparency and accountability.
  • Partner with clients to develop and maintain comprehensive privacy policies and procedures that align with industry best practices and applicable data privacy regulations.
  • Cultivate a deep understanding of the latest data privacy regulations (e.g., GDPR, CCPA, DPDPA, China PIPL, etc) and advise clients on their potential business implications.
  • Facilitate training sessions for both internal and client teams to raise awareness of data privacy best practices.
  • Effectively manage stakeholder relationships, ensuring clear communication and project alignment.
  • Foster strong collaboration with colleagues across diverse disciplines (e.g., legal, technology) to deliver holistic privacy solutions to clients.


Skills and attributes for success

  • Relevant work Experience: 4 to 6 years.
  • Proven track record of successfully conducting PIAs, DPIAs, privacy gap assessments, and privacy maturity assessments for diverse clients.
  • In-depth knowledge of data subject rights and experience in supporting clients with their fulfilment.
  • A proven ability to develop and implement data breach response plans and manage privacy incidents effectively.
  • Experience in developing privacy strategies and roadmaps.
  • Experience in planning and implementation of privacy controls.
  • Strong understanding on RoPA documentation.
  • Demonstrated ability to craft and maintain comprehensive privacy policies and procedures.
  • Proficiency in a variety of data privacy regulations, including GDPR, CCPA, PIPEDA, DPDPA etc.
  • Excellent communication, presentation, and interpersonal skills to effectively engage with stakeholders at all levels.
  • Ability to manage multiple priorities and deadlines independently and collaboratively in a fast-paced environment.
  • Strong analytical and problem-solving skills to identify complex privacy issues and develop practical solutions.
  • A passion for data privacy and a commitment to staying current with evolving industry trends and regulations.
  • Good Understanding of risk assessment frameworks.


To qualify for the role, you must have

  • Graduates / BE - B. Tech / MCA / M. Sc (Stats, Maths, Computer Science) / MBA with background in computer science and programming.
  • Certifications related to Data Privacy such as CIPP, CIPM, CIPT etc.
  • Functional and non-functional privacy requirements definition and documentation experience.


Ideally, you’ll also have

  • Project management skills.
  • CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor and Lead Implementer.


What we look for

  • A team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
  • An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
  • Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees, and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

  • Support, coaching and feedback from some of the most engaging colleagues around.
  • Opportunities to develop new skills and progress your career.
  • The freedom and flexibility to handle your role in a way that’s right for you.



EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.